Setting Up DKIM/DomainKeys in EmailLabs

Only administrators with the Edit Global Email Settings permission can set up and edit DKIM/DomainKeysAn email authentication system that gives email providers a way to verify that a message came from you and was not altered by anyone along the way. . For information about permissions, see Changing User Permissions.

TIP

For information about setting up DKIM/DomainKeys in Aurea Campaign Manager, see Setting Up DKIM/DomainKeys in Aurea Campaign Manager. For information about DKIM/DomainKeys, see DKIM/DomainKeys Overview.

You must set up DKIM/DomainKeys only if you are using your own address (for example, newsletter@yourdomain.com) or an address set up with domain masking (for example, reply-xxx@email.yourdomain.com).

If you are using the default Aurea Campaign Manager address (for example, reply-xxx@lyris5.com), your messages are automatically signed with DKIM/DomainKeys and you do not need to do anything.

TIP

For information about domain masking, see Advanced Email Setup.

Setting up DKIM/DomainKeys in EmailLabs

To set up DKIM/DomainKeys in EmailLabs, open the Domain Keys Settings page and do the following:

  1. Generate the selector for a domain.
  2. Publish the selector to DNS. To accomplish this, you must send the selector to your IT team or the person who handles your DNS record.
  3. Optionally, create additional selectors and set a master selectorThe selector that your email system uses to sign messages. .
TIP

For more information about selectors, see What are selectors?.

Opening the Domain Keys Settings Page

  1. On the navigation bar, select Email Marketing > Launch EmailLabs. The Account Home page appears.
  2. In the Global Email Settings section, click Domain Keys. The Domain Keys Settings page opens, showing all your existing domains.

What Do You Want to Do?

Seting up DKIM/DomainKeys for a Domain

  1. Open the Domain Keys Settings page.
  2. Make sure Yes is selected in DKIM/Domain Key Signing.
  3. Do one of the following:
    • Select the desired domain from the list on the left.
    • Create a new domain by clicking Add domain. In the prompt that opens, type the domain name and click OK. Select the new domain from the list.
    NOTE

    The domain name must be in name.com format, for example mydomain.com.

    The selector appears in the field on the right as shown in the following illustration.

  4. Publish the TXT DNS record
NOTE

The notification message (No public key in TXT record - verify) appears above the selector until the DNS record is updated (approximately 48 hours after the TXT record is published).

After the DNS record is updated and if it is correct, this message will change to Selector: selector_name - DNS record verified.

If the record is incorrect, the message states the problem. In this case, you must resolve the problem and publish the TXT record again.

Publishing the TXT DNS record

You must publish the selector to a TXT DNS record every time you change the message signature, for example when you add a domain or change the master selector.

  1. Open the Domain Keys Settings page.
  2. If it is not already selected, select the selector you want to publish:
  1. In the list on the left, select the domain.
  2. In the Master Selector list, select the selector you want to publish.
  1. Copy all text in the Selector field and send it to your IT team or the person who handles your DNS record. That person must create and publish the TXT record to the DNS.

Messages sent from this domain are signed with the new selector after the DNS record is updated (about 48 hours after the TXT record is published.)

TIP

How do you know when the DNS record is updated?

On the Domain Keys Settings page, select the selector you published. You will see the following message above the Selector field: The TXT entry of DNS record for <domain_key_name> has been verified.

Creating a Selector

Optionally, you can create additional selectors for a domain. You might use multiple selectors, for example, if you want to periodically change the message signature for security reasons.

If you use multiple selectors, the email system uses only one of them, the master selector, to sign your messages. For more information, see Why use multiple selectors?

  1. Open the Domain Keys Settings page.
  2. If it is not already selected, select the desired domain from the domain list on the left.
  3. Click .
  4. Click OK. The selector is created and its name appears in the Master Selector drop-down list.
  5. Optionally, to set the new selector as master, by clicking .
  6. Publish the TXT DNS record.

Setting a Master Selector

If you use multiple selectors, you must set one as the master. The master must be the selector published in DNS because it is the only one your email system uses to sign messages. For this reason, when you change the master selector, you must publish a new TXT DNS record.

  1. Open the Domain Keys Settings page.
  2. Select the domain you want from the list on the left.
  3. In the Selector or Master Selector drop-down list, select the desired selector to set as the master.
NOTE

The name of this list changes depending on which selector currently appears in the Selector field.

  1. Click .
  2. Click OK.
  3. Publish the TXT DNS record.
NOTE

The notification message (No public key in TXT record - verify) appears above the selector until the DNS record is updated (approximately 48 hours after the TXT record is published). After the DNS record is updated and if it is correct, this message changes to Selector: selector_name - DNS record verified. If the record is incorrect, the message states the problem. In this case, you must resolve the problem and publish the TXT record again.

Removing a Selector

CAUTION

If you remove a selector, all messages using that selector fail the signature test. If you think some of these messages might not have been delivered yet, you should keep the selector, create a new one, and set the new selector as the master.

You cannot remove the master selector. To remove the master selector, you must first set another one as the master.

  1. Open the Domain Keys Settings page.
  2. If it is not already selected, select the selector you want to remove:
  1. In the list on the left, select the domain.
  2. In the Master Selector list, select the selector you want to remove.
  1. If the selector is set as the master, set another master selector.
  2. Click .
  3. Click OK. The selector is removed.